{"id":22250,"date":"2012-07-17T15:21:05","date_gmt":"2012-07-17T05:21:05","guid":{"rendered":"http:\/\/power-up.space\/?p=22250"},"modified":"2012-07-17T15:21:05","modified_gmt":"2012-07-17T05:21:05","slug":"bitdefender-study-one-in-five-ios-apps-can-access-the-address-book","status":"publish","type":"post","link":"https:\/\/www.impulsegamer.com\/wordpress\/?p=22250","title":{"rendered":"Bitdefender Study: One in Five iOS Apps Can Access the Address Book"},"content":{"rendered":"

Tens of Thousands of iPhone Apps May Access User Contacts, Track Location Without Owner\u2019s Clear Knowledge<\/em>\u00a0<\/strong><\/p>\n

SYDNEY & AUCKLAND<\/em> <\/strong>\u2013 July 17, 2012<\/strong> \u2013\u00a0 Almost one in five iOS applications can access your Address Book while some 41 per cent can track your location and more than one in three store your data without encrypting it, according to Bitdefender<\/a> research.<\/p>\n

A months-long Bitdefender study of more than 65,000 apps distributed widely on the Apple App Store revealed tens of thousands that tap contact info, track a user\u2019s location, and access some data without a user\u2019s explicit permission.<\/p>\n

While many apps clearly use these privileges to function, others have no obvious use for the data they may be collecting, ranging from accessing a user\u2019s phone book to tracking usage. By default, apps on the App Store only ask for permission to access location\u2013related services and not when accessing the Address Book or other functions.<\/p>\n

Bitdefender\u2019s analysis included 65,000 of the more popular apps in the App Store and found that only 57.5 per cent encrypt stored data while the rest don\u2019t, potentially placing the user\u2019s data at risk after accessing it.\u00a0 Some 41.4 per cent of the apps analysed can track a user\u2019s location, meaning that most iPhone owners are likely to have at least one app on their device capable of knowing where they are.<\/p>\n

Location tracking used in contextual ads that display based on geo position is highly controversial, yet common. This type of information can be sold to companies to help build effective marketing campaigns. Note that Bitdefender\u2019s study did not cover all available apps so the numbers and ratios may change when extrapolated to the whole App Store.<\/p>\n

The research also revealed 18.6 per cent of the apps can access a user\u2019s Address Book, including all contact details. The only legitimate reason for an app to access the user\u2019s Address Book would be to transfer contacts or merge social media contact details with your on-device phone numbers. It\u2019s unlikely that almost a fifth of all apps need Address Book info to function. Chances are high that many apps access Address Books without the user\u2019s knowledge.<\/p>\n

Bitdefender also found that 30.7 per cent of the apps analysed can display ads and 16.4 per cent can connect to Facebook. Other functions include tracking usage through Flurry analytics, Google Analytics of Mobclix analytics. Some apps use all three analytics software. Hundreds of apps analysed also use an iPhone\u2019s UDID, or Unique Device Identifier, which can identify the owner, while hundreds more use background voice-over-IP, Open Feint usage tracking and more.<\/p>\n

It\u2019s worrying that stored data encryption on iOS apps is low and location tracking so prevalent.\u00a0 Without notification of what an app accesses, it\u2019s difficult to control what information users give up. We see a worrying landscape of poor user data encryption, prevalent location tracking and silent, unjustified, address book access.<\/p>\n

Private data may be used to determine an individual\u2019s behaviour patterns including, but not limited to, profiling for marketing activities. Collection algorithms and patterns are sometimes used reveal much more, including user identity. There is no publicly accessible database for user education and awareness on these privacy concerns.<\/p>\n","protected":false},"excerpt":{"rendered":"

Tens of Thousands of iPhone Apps May Access User Contacts, Track Location Without Owner\u2019s Clear Knowledge\u00a0 SYDNEY & AUCKLAND \u2013 July 17, 2012 \u2013\u00a0 Almost one in five iOS applications can access your Address Book while some 41 per cent can track your location and more than one in three store your data without encrypting<\/p>\n

Read More\u2026<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-22250","post","type-post","status-publish","format-standard","hentry","category-game-news"],"_links":{"self":[{"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/22250","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=22250"}],"version-history":[{"count":1,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/22250\/revisions"}],"predecessor-version":[{"id":22253,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/22250\/revisions\/22253"}],"wp:attachment":[{"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=22250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=22250"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.impulsegamer.com\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=22250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}